CN104917658B - A kind of information acquisition method, equipment and system - Google Patents
A kind of information acquisition method, equipment and system Download PDFInfo
- Publication number
- CN104917658B CN104917658B CN201410084722.XA CN201410084722A CN104917658B CN 104917658 B CN104917658 B CN 104917658B CN 201410084722 A CN201410084722 A CN 201410084722A CN 104917658 B CN104917658 B CN 104917658B
- Authority
- CN
- China
- Prior art keywords
- capwap tunnel
- capwap
- business datum
- characteristic value
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Abstract
The embodiment of the invention discloses a kind of information acquisition method, equipment and system, described information acquisition methods include：Acquire wireless access point control and supply CAPWAP tunnel data；Identify the CAPWAP tunnel business datum in the CAPWAP tunnel data；CAPWAP message characteristic value is configured, the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, obtains the access point AP information in the CAPWAP tunnel business datum.
Description
Technical field
The present invention relates to the technologies for information acquisition of the communications field, and in particular to a kind of information acquisition method, equipment and system.
Background technology
Fig. 1 is the general networks configuration diagram that user accesses internet in the prior art, as shown in Figure 1, user terminal
11 pass through wireless channel and access point（AP, Access Point）12 connections, the AP12 are controlled and are supplied by wireless access point
It should（CAPWAP, Controlling and Provisioning of Wireless Access Point）It is controlled with access in tunnel
Device processed（AC, Access Controller）13 connections, the AC13 pass through commodity ethernet Internet protocol again（IP,
Internet Protocol）Management Of Resources, Accesses ＆ Network equipment 15 connects.Wherein, data message is sent to certification clothes by the AC simultaneously
Business device 14 is authenticated.
In above process, if which AP12 the network access behaviors that analyze specific user is happened on, standard is needed
Obtain really and in time two kinds of messages：First, the AC13 is sent to the data message of the network equipment 15；Second is that the AC13 is sent
To the message identifying of certificate server 14.In the first data message, IP address and network behavior data letter including user
Breath；In second of message identifying, including user identifier（The usually phone number of user）, the IP address of user, affiliated AP
Medium access control（MAC, Media Access Control）The information such as address.Only both data obtain simultaneously,
Which AP the network access behaviors that energy analysis obtains specific user is happened on.
But it while obtains above two data and can bring problems with：
First, it is very high to the performance and request memory of server process calculating.Due to the original record of user network behavior
Information is only comprising IP address, destination server IP address, if which each user behavior for wanting to obtain on network rises in
AP must then safeguard the mapping table of a huge IP address-AP MAC Address, and this table is dynamic change
's.
Secondly, to ensureing that data source integrality increases difficulty.Because above two data must be obtained continuously in real time,
It can accomplish that analysis result is accurate, once one of the first data message and second message identifying have loss, then can not close
Connection, cause EMS memory occupation can not discharge and largely can not association user behavior record, even if given threshold handles residual number
According to still causing to seriously affect to overall performance, the paralysis of server can be caused when serious.
Invention content
To solve existing technical problem, the embodiment of the present invention provides a kind of information acquisition method, equipment and system,
The CAPWAP tunnel business datum in CAPWAP tunnel data can be accurately identified, is obtained in the CAPWAP tunnel business datum
AP information.
In order to achieve the above objectives, the technical solution of the embodiment of the present invention is realized in：
An embodiment of the present invention provides a kind of information acquisition method, the method includes：
Acquire wireless access point control and supply CAPWAP tunnel data；
Identify the CAPWAP tunnel business datum in the CAPWAP tunnel data；
CAPWAP message characteristic value is configured, the CAPWAP tunnel business number is parsed according to the CAPWAP message characteristic value
According to obtaining the access point AP information in the CAPWAP tunnel business datum.
In said program, the CAPWAP message characteristic value includes：The characteristic value of Preamble fields, the spy of HLEN fields
Value indicative, the characteristic value of Frag Offset fields, the characteristic value of Payload Start Position fields；
It is described that the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, obtain the CAPWAP
AP information in tunnel service data, including：
Producer, the protocol version of CAPWAP tunnel are identified according to the characteristic value of the Preamble field configurations；According to institute
The characteristic value for stating HLEN field configurations identifies the packet header length of the CAPWAP tunnel business datum；According to the Frag
The characteristic value of Offset field configurations identifies position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；Root
The CAPWAP tunnel business datum content is identified according to the characteristic value of the Payload Start Position field configurations
Initial position；
By calling and the producer and the matched analysis program of protocol version, according to the CAPWAP tunnel business datum
Position and the CAPWAP tunnel in CAPWAP tunnel data packet of packet header length, the CAPWAP tunnel business datum
The initial position of business datum content parses the CAPWAP tunnel business datum, obtains the Payload Start
The AP information included after Position fields.
In said program, the CAPWAP tunnel business datum in the identification CAPWAP tunnel data, including：
It determines the port numbers of the CAPWAP tunnel business datum, the corresponding data message in the port is determined as described
CAPWAP tunnel business datum.
The embodiment of the present invention additionally provides a kind of information acquisition method, the method includes：
Access controller AC receives CAPWAP tunnel data, and the CAPWAP tunnel data are sent to collecting device；
The collecting device identifies the CAPWAP tunnel business datum in the CAPWAP tunnel data；
CAPWAP message characteristic value is configured, the CAPWAP tunnel business number is parsed according to the CAPWAP message characteristic value
According to obtaining the AP information in the CAPWAP tunnel business datum.
In said program, the collecting device identifies the CAPWAP tunnel business datum in the CAPWAP tunnel data,
Including：
The collecting device determines the port numbers of the CAPWAP tunnel business datum, by the corresponding datagram in the port
Text is determined as the CAPWAP tunnel business datum.
In said program, the CAPWAP message characteristic value includes：The characteristic value of Preamble fields, the spy of HLEN fields
Value indicative, the characteristic value of Frag Offset fields, the characteristic value of Payload Start Position fields；
It is described that the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, obtain the CAPWAP
AP information in tunnel service data, including：
The collecting device identifies the producer of CAPWAP tunnel, agreement version according to the characteristic value that the Preamble is configured
This；The packet header length of the CAPWAP tunnel business datum is identified according to the characteristic value that the HLEN is configured；According to the Frag
The characteristic value of Offset configurations identifies position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；According to institute
The characteristic value for stating Payload Start Position configurations identifies the initial position of the CAPWAP tunnel business datum content；
Calling and the producer and the matched analysis program of protocol version, according to the packet of the CAPWAP tunnel business datum
The position and the CAPWAP tunnel business of head length, the CAPWAP tunnel business datum in CAPWAP tunnel data packet
The initial position of data content parses the CAPWAP tunnel business datum, obtains the Payload Start Position words
The AP information included after section.
The embodiment of the present invention additionally provides a kind of collecting device, and the collecting device includes：Data acquisition module, identification mould
Block, configuration module and parsing module；Wherein,
The CAPWAP tunnel data for acquiring CAPWAP tunnel data, are sent to institute by the data acquisition module
State identification module；
The identification module, for identifying in the CAPWAP tunnel data of the data acquisition module transmission
The CAPWAP tunnel business datum is sent to the parsing module by CAPWAP tunnel business datum；
The configuration module, for CAPWAP message characteristic value to be configured；
The parsing module, the CAPWAP message characteristic value for being configured according to the configuration module parse the knowledge
The CAPWAP tunnel business datum that other module is sent, obtains the AP information in the CAPWAP tunnel business datum.
In said program, the configuration module, for the feature of the characteristic value of Preamble fields, HLEN fields to be configured
Value, the characteristic value of Frag Offset fields, the characteristic value of Payload Start Position fields；
The parsing module, for the characteristic value of the Preamble fields identification being configured according to the configuration module
The producer of CAPWAP tunnel, protocol version；The CAPWAP tunnel business datum is identified according to the characteristic value of the HLEN fields
Packet header length；Identify the CAPWAP tunnel business datum in CAPWAP according to the characteristic value of the Frag Offset fields
Position in tunneling data packet；The CAPWAP tunnels are identified according to the characteristic value of the Payload Start Position fields
The initial position of road business datum content；By calling and the producer and the matched analysis program of protocol version, according to described
The position of the packet header length of CAPWAP tunnel business datum, the CAPWAP tunnel business datum in CAPWAP tunnel data packet
And the initial position of the CAPWAP tunnel business datum content parses the CAPWAP tunnel business datum, described in acquisition
The AP information included after Payload Start Position fields.
In said program, the identification module, for determining the port numbers of the CAPWAP tunnel business datum, by described in
The corresponding data message in port is determined as the CAPWAP tunnel business datum.
The embodiment of the present invention additionally provides a kind of Information Acquisition System, the system comprises：Access controller AC and acquisition
Equipment；Wherein,
The CAPWAP tunnel data for receiving CAPWAP tunnel data, are sent to collecting device by the AC；
The collecting device is the collecting device described in the embodiment of the present invention.Acquisition of information side provided in an embodiment of the present invention
CAPWAP tunnel data are sent to collecting device by method, equipment and system by AC；The collecting device identifies the CAPWAP
CAPWAP tunnel business datum in tunneling data；CAPWAP message characteristic value is configured, according to the CAPWAP message characteristic value
The CAPWAP tunnel business datum is parsed, obtains the AP information in the CAPWAP tunnel business datum；In this way, accurately know
Do not go out the CAPWAP tunnel business datum in CAPWAP tunnel data, so as to which which AP the network behaviors for obtaining user is happened at
On, and system deployment is simple and fast, stability is good, and suitability is good；In addition, the analytic method provided through the embodiment of the present invention,
It is identified without subsequent association, directly obtains the MAC Address of AP, the source IP address of user, the mesh in CAPWAP tunnel business datum
The information such as IP address of server are marked, it is relatively low to the process performance requirement of system, and will not generate largely can not association user row
For record data, reduce a large amount of system maintenance work.
Description of the drawings
Fig. 1 is the general networks configuration diagram that user accesses internet in the prior art；
Fig. 2 is the flow diagram of the information acquisition method of the embodiment of the present invention；
Fig. 3 is the composition schematic diagram of CAPWAP tunnel data in the embodiment of the present invention；
Fig. 4 is CAPWAP tunnel business datum packet header form schematic diagram in the embodiment of the present invention；
Fig. 5 is the flow diagram of the information acquisition method of another embodiment of the present invention；
Fig. 6 is the composition structure diagram of the collecting device of the embodiment of the present invention；
Fig. 7 is the composition structure diagram of the Information Acquisition System of the embodiment of the present invention.
Specific embodiment
In various embodiments of the present invention, the CAPWAP tunnel data that AP is sent to AC by AC are sent to acquisition and set
It is standby, after the collecting device receives the CAPWAP tunnel data, by the CAPWAP message characteristic value that is configured to described
CAPWAP tunnel business datum in CAPWAP tunnel data is parsed, and then is obtained in the CAPWAP tunnel business datum
AP information.
Below in conjunction with the accompanying drawings and specific embodiment the present invention is described in further detail.
Fig. 2 is the flow diagram of the information acquisition method of the embodiment of the present invention, and described information acquisition methods are applied with adopting
Collect equipment side；As shown in Fig. 2, described information acquisition methods include the following steps：
Step 201：Acquire CAPWAP tunnel data.
Here, the CAPWAP tunnel data are sent by AC；Specifically, the AC receives the CAPWAP tunnel of AP transmissions
Data, by the CAPWAP tunnel data image to collecting device.
Specifically, it is described by CAPWAP tunnel data image to collecting device by by least one port of the AC
Method on data image at least one port of the collecting device is realized, by the data message of the designated port of the AC
Replicate and be sent to the designated port of the collecting device；It is analyzed for the ease of the data message to interface, it can be by institute
The designated port for stating the designated port of AC and the collecting device corresponds, can also be by one or more ports of the AC
It is corresponding with a certain designated port of the collecting device, and then realize the acquisition, analysis, monitoring to data message.
Step 202：Identify the CAPWAP tunnel business datum in the CAPWAP tunnel data.
Fig. 3 is the composition schematic diagram of CAPWAP tunnel data in the embodiment of the present invention, as shown in figure 3, the CAPWAP tunnels
Track data includes：CAPWAP tunnel business datum, CAPWAP tunnel management data and other data；Wherein, other described data
Including：Dynamic host configuration protocol（DHCP, Dynamic Host Configuration Protocol）Data, simple network
Management agreement（SNMP, Simple Network Management Protocol）Data, network Internet Control Message Protocol（ICMP,
Internet Control Message Protocol）Data etc..The technical solution of the embodiment of the present invention is all
CAPWAP tunnel management data and other data are filtered out in CAPWAP tunnel data, identify CAPWAP tunnel business datum.
Here, the CAPWAP tunnel business datum in the identification CAPWAP tunnel data, including：
It determines the port numbers of the CAPWAP tunnel business datum, the corresponding data message in the port is determined as described
CAPWAP tunnel business datum.Specifically, 5247 port of CAPWAP tunnel generally use is as CAPWAP tunnel business datum
Transmission port；In collecting device side, the mirror port of the corresponding collecting device in 5247 port is identified, by the mirror image
The data message of port is determined as CAPWAP tunnel business datum.Specifically, following code, which can be used, identifies the CAPWAP tunnels
Road business datum：User Datagram Protocol, Src Port：58557（58557）, Dst Port：Capwap-data
（5247）
Source port：58557（58557）
Destination port：capwap-data（5247）
Step 203：CAPWAP message characteristic value is configured, the CAPWAP tunnels are parsed according to the CAPWAP message characteristic value
Road business datum obtains the AP information in the CAPWAP tunnel business datum.
In the embodiment of the present invention, there is different coding and decoding modes for the CAPWAP tunnel of different manufacturers different editions,
But the package head format of most basic CAPWAP tunnel service message is fixed, Fig. 4 is CAPWAP tunnels in the embodiment of the present invention
Road business datum packet header form schematic diagram；As shown in figure 4, the reality of the CAPWAP tunnel business datum of different manufacturers different editions
Existing, the several fields for being related to changing include：CAPWAP Preamble, HLEN, Frag Offset and (optional) Radio
Whether MAC Address and/or (optional) Wireless Specific Information the two fields are sky etc.；
Wherein, the particular content of CAPWAP Preamble shows the information such as the producer of CAPWAP tunnel, protocol version；HLEN's takes
Value shows the information such as the packet header length of data message, size；Frag Offset show data message whether fragment and institute
State position of the CAPWAP tunnel service message in data message fragment.
The technical solution of the embodiment of the present invention is exactly the package head format according to above-mentioned fixed CAPWAP tunnel service message,
Several different fields are differed only in, CAPWAP message characteristic value is configured, institute is parsed according to the CAPWAP message characteristic value
CAPWAP tunnel business datum is stated, so as to obtain the AP information in the CAPWAP tunnel service message, i.e., shown in Fig. 4
Particular content in the form of CAPWAP tunnel business datum packet header after field Payload.It is specific interior after the field Payload
Appearance includes：The unified resource that the MAC Address of AP, the source IP address of user, the IP address of destination server and user access is determined
Position symbol（URL, Uniform Resource Locator）The information such as character string.
In the present embodiment, the CAPWAP message characteristic value of configuration includes：The characteristic value of Preamble fields, HLEN words
Characteristic value, the characteristic value of Frag Offset fields, the characteristic value of Payload Start Position fields of section；Described
The CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, is obtained in the CAPWAP tunnel business datum
AP information, including：
The producer of CAPWAP tunnel, protocol version are identified according to the characteristic value that the Preamble is configured；According to described
The characteristic value of HLEN configurations identifies the packet header length of the CAPWAP tunnel business datum；It is configured according to the Frag Offset
Characteristic value identify the position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；According to the Payload
The characteristic value of Start Position configurations identifies the initial position of the CAPWAP tunnel business datum content；
By calling and the producer and the matched analysis program of protocol version, according to the CAPWAP tunnel business datum
Position and the CAPWAP tunnel in CAPWAP tunnel data packet of packet header length, the CAPWAP tunnel business datum
The initial position of business datum content parses the CAPWAP tunnel business datum, obtains the Payload Start
The AP information included after Position fields.
Table 1 illustrates table for the configuration of the CAPWAP message characteristic value of the embodiment of the present invention, as shown in table 1, in allocation list 1
The characteristic value value of Preamble, HLEN, Frag Offset, Payload Start Position fields；For example,
The characteristic value value of Preamble fields is configured to 10, then identifies and the 10 corresponding CAPWAP tunnel of characteristic value value
Producer and protocol version call and the producer of the CAPWAP tunnel and the matched analysis program of protocol version；For described
HLEN fields, the Frag Offset fields, the configuration of the Payload Start Position fields and identification method with
Preamble fields are similar, do not repeating herein.
| CAPWAP message field | Characteristic value value |
| Preamble | |
| HLEN | |
| Frag Offset | |
| Payload Start Position |
Table 1
Specifically, identifying the producer of CAPWAP tunnel, protocol version according to the characteristic value that the Preamble is configured, call
Include with the producer of the CAPWAP tunnel and the matched analysis program of protocol version, the analysis program：Parse CAPWAP tunnels
Total program of road business datum and the CAPWAP tunnel business datum packet header form for different manufacturers diversity of protocol versions
Modular program；When the CAPWAP tunnel producer and protocol version for determining current CAPWAP tunnel business datum, by calling
Total program of CAPWAP tunnel business datum and the CAPWAP tunnel producer and the corresponding modular program of protocol version are stated, to institute
It states CAPWAP tunnel business datum to be parsed, obtain specific interior after the CAPWAP tunnel business datum Payload fields
Hold, the particular content includes：The MAC Address of AP, the source IP address of user, the IP address of destination server and user visit
The information such as the URL character strings asked, so as to which which AP the network behaviors that user is obtained according to the particular content is happened on.
The embodiment of the present invention additionally provides a kind of information acquisition method, and described information acquisition methods are applied to AC and acquisition is set
Standby side；Fig. 5 is the flow diagram of the information acquisition method of another embodiment of the present invention；As shown in figure 5, described information acquisition side
Method includes the following steps：
Step 501：AC receives CAPWAP tunnel data, and the CAPWAP tunnel data are sent to collecting device.
Specifically, it is described by CAPWAP tunnel data image to collecting device by by least one port of the AC
Method on data image at least one port of the collecting device is realized, by the data message of the designated port of the AC
Replicate and be sent to the designated port of the collecting device；It is analyzed for the ease of the data message to interface, it can be by institute
The designated port for stating the designated port of AC and the collecting device corresponds, can also be by one or more ports of the AC
It is corresponding with a certain designated port of the collecting device, and then realize the acquisition, analysis, monitoring to data message.
Step 502：The collecting device identifies the CAPWAP tunnel business datum in the CAPWAP tunnel data.
Here, the collecting device identifies the CAPWAP tunnel business datum in the CAPWAP tunnel data, including：
The collecting device determines the port numbers of the CAPWAP tunnel business datum, by the corresponding datagram in the port
Text is determined as the CAPWAP tunnel business datum.Specifically, 5247 port of CAPWAP tunnel generally use is as CAPWAP tunnels
The transmission port of road business datum；In collecting device side, the mirror image end of the corresponding collecting device in 5247 port is identified
Mouthful, the data message of the mirror port is determined as CAPWAP tunnel business datum.
Step 503：CAPWAP message characteristic value is configured, the CAPWAP tunnels are parsed according to the CAPWAP message characteristic value
Road business datum obtains the AP information in the CAPWAP tunnel business datum.
Here, the CAPWAP message characteristic value includes：The characteristic value of Preamble fields, the characteristic value of HLEN fields,
The characteristic value of Frag Offset fields, the characteristic value of Payload Start Position fields；
It is described that the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, obtain the CAPWAP
AP information in tunnel service data, including：
The collecting device identifies the producer of CAPWAP tunnel, agreement version according to the characteristic value that the Preamble is configured
This；The packet header length of the CAPWAP tunnel business datum is identified according to the characteristic value that the HLEN is configured；According to the Frag
The characteristic value of Offset configurations identifies position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；According to institute
The characteristic value for stating Payload Start Position configurations identifies the initial position of the CAPWAP tunnel business datum content；
By calling and the producer and the matched analysis program of protocol version, according to the CAPWAP tunnel business datum
Position and the CAPWAP tunnel in CAPWAP tunnel data packet of packet header length, the CAPWAP tunnel business datum
The initial position of business datum content parses the CAPWAP tunnel business datum, obtains the Payload Start
The AP information included after Position fields.
For example, the characteristic value value of Preamble fields is configured to 10, then identify corresponding with the characteristic value value 10
CAPWAP tunnel producer and protocol version, call with the producer of the CAPWAP tunnel and the matched parsing journey of protocol version
Sequence；Configuration for the HLEN fields, the Frag Offset fields, the Payload Start Position fields
And identification method is similar to Preamble fields, is not repeating herein.
Specifically, identifying the producer of CAPWAP tunnel, protocol version according to the characteristic value that the Preamble is configured, call
Include with the producer of the CAPWAP tunnel and the matched analysis program of protocol version, the analysis program：Parse CAPWAP tunnels
Total program of road business datum and the CAPWAP tunnel business datum packet header form for different manufacturers diversity of protocol versions
Modular program；When the CAPWAP tunnel producer and protocol version for determining current CAPWAP tunnel business datum, by calling
Total program of CAPWAP tunnel business datum and the CAPWAP tunnel producer and the corresponding modular program of protocol version are stated, to institute
It states CAPWAP tunnel business datum to be parsed, obtain specific interior after the CAPWAP tunnel business datum Payload fields
Hold, the particular content includes：The MAC Address of AP, the source IP address of user, the IP address of destination server and user visit
The information such as the URL character strings asked, so as to which which AP the network behaviors that user is obtained according to the particular content is happened on.
Fig. 6 is the composition structure diagram of the collecting device of the embodiment of the present invention；As shown in fig. 6, the collecting device packet
It includes：Data acquisition module 51, identification module 52, configuration module 53 and parsing module 54；Wherein,
For acquiring CAPWAP tunnel data, the CAPWAP tunnel data are sent to for the data acquisition module 51
The identification module 52；
The identification module 52, for identifying in the CAPWAP tunnel data of the transmission of data acquisition module 51
The CAPWAP tunnel business datum is sent to the parsing module 54 by CAPWAP tunnel business datum；
The configuration module 53, for CAPWAP message characteristic value to be configured；
The parsing module 54, the CAPWAP message characteristic value for being configured according to the configuration module 53 parse institute
The CAPWAP tunnel business datum of the transmission of identification module 52 is stated, obtains the AP information in the CAPWAP tunnel business datum.
Wherein, the configuration module 53, specifically for characteristic value, the feature of HLEN fields of Preamble fields is configured
Value, the characteristic value of Frag Offset fields, the characteristic value of Payload Start Position fields；
The parsing module 54, specifically for the feature for the Preamble fields being configured according to the configuration module 53
The producer of value identification CAPWAP tunnel, protocol version；The CAPWAP tunnel industry is identified according to the characteristic value of the HLEN fields
The packet header length for data of being engaged in；Identify that the CAPWAP tunnel business datum exists according to the characteristic value of the Frag Offset fields
Position in CAPWAP tunnel data packet；According to the identification of the characteristic value of the Payload Start Position fields
The initial position of CAPWAP tunnel business datum content；It is additionally operable to by calling and the producer and the matched parsing of protocol version
Program, according to the packet header length of the CAPWAP tunnel business datum, the CAPWAP tunnel business datum in CAPWAP tunnel
The initial position of position and the CAPWAP tunnel business datum content in data packet parses the CAPWAP tunnel business
Data obtain the AP information included after the Payload Start Position fields.
Wherein, the identification module 52, specifically for determining the port numbers of the CAPWAP tunnel business datum, by described in
The corresponding data message in port is determined as the CAPWAP tunnel business datum.
Specifically, the port numbers for the CAPWAP tunnel business datum that the identification module 52 determines are generally 5247 ends
Mouthful, by identifying the data message of 5247 port, the data message is determined as the CAPWAP tunnel business datum.
It will be appreciated by those skilled in the art that in the electronic equipment of the embodiment of the present invention each processing unit function, can join
Understand according to the associated description of aforementioned data processing method.
Wherein, the collecting device described in the embodiment of the present invention in practical applications, can be used by network operation server, network
The equipment such as the behavioural analysis server at family are realized；Wherein, the identification module 52 in the collecting device, configuration module 53 and parsing
Module 54 in practical applications, can be by the central processing unit in the collecting device（CPU, Central Processing
Unit）, digital signal processor（DSP, Digital Signal Processor）Or field programmable gate array（FPGA,
Field Programmable Gate Array）It realizes；Data acquisition module 51 in the collecting device is in practical application
In, it can be realized by receiver or receiving port.
Fig. 7 is the composition structure diagram of the Information Acquisition System of the embodiment of the present invention, as shown in fig. 7, described information obtains
System is taken to include：AC60 and collecting device 50；Wherein,
The CAPWAP tunnel data for receiving CAPWAP tunnel data, are sent to collecting device 50 by the AC60；
The collecting device 50, for identifying the CAPWAP tunnel business datum in the CAPWAP tunnel data；Configuration
CAPWAP message characteristic value parses the CAPWAP tunnel business datum, described in acquisition according to the CAPWAP message characteristic value
Access point AP information in CAPWAP tunnel business datum.
Wherein, the collecting device 50, specifically for determining the port numbers of the CAPWAP tunnel business datum, by described in
The corresponding data message in port is determined as the CAPWAP tunnel business datum.
Wherein, the collecting device 50, specifically for the characteristic value of Preamble fields is configured, the spy of HLEN fields is configured
Value indicative, the characteristic value that Frag Offset fields are configured, the characteristic value that Payload Start Position fields are configured；According to
The producer of the characteristic value identification CAPWAP tunnel of the Preamble field configurations, protocol version；Matched according to the HLEN fields
The characteristic value put identifies the packet header length of the CAPWAP tunnel business datum；According to the Frag Offset field configurations
Characteristic value identifies position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；According to the Payload
The characteristic value of Start Position field configurations identifies the initial position of the CAPWAP tunnel business datum content.
Wherein, the collecting device 50 includes：Data acquisition module 51, identification module 52, configuration module 53 and parsing mould
Block 54, the collecting device 50 is as shown in Figure 6.The function of modules in the collecting device 50 is in a upper embodiment
Middle detailed description, details are not described herein again.
It should be understood by those skilled in the art that, the embodiment of the present invention can be provided as method, system or computer program
Product.Therefore, the shape of the embodiment in terms of hardware embodiment, software implementation or combination software and hardware can be used in the present invention
Formula.Moreover, the present invention can be used can use storage in one or more computers for wherein including computer usable program code
Medium（Including but not limited to magnetic disk storage and optical memory etc.）The form of the computer program product of upper implementation.
The present invention be with reference to according to the method for the embodiment of the present invention, equipment（System）And the flow of computer program product
Figure and/or block diagram describe.It should be understood that it can be realized by computer program instructions every first-class in flowchart and/or the block diagram
The combination of flow and/or box in journey and/or box and flowchart and/or the block diagram.These computer programs can be provided
The processor of all-purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce
A raw machine so that the instruction performed by computer or the processor of other programmable data processing devices is generated for real
The device of function specified in present one flow of flow chart or one box of multiple flows and/or block diagram or multiple boxes.
These computer program instructions, which may also be stored in, can guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works so that the instruction generation being stored in the computer-readable memory includes referring to
Enable the manufacture of device, the command device realize in one flow of flow chart or multiple flows and/or one box of block diagram or
The function of being specified in multiple boxes.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that counted
Series of operation steps are performed on calculation machine or other programmable devices to generate computer implemented processing, so as in computer or
The instruction offer performed on other programmable devices is used to implement in one flow of flow chart or multiple flows and/or block diagram one
The step of function of being specified in a box or multiple boxes.
The foregoing is only a preferred embodiment of the present invention, is not intended to limit the scope of the present invention.
Claims (7)
1. a kind of information acquisition method, which is characterized in that the method includes：
Acquire wireless access point control and supply CAPWAP tunnel data；
Identify the CAPWAP tunnel business datum in the CAPWAP tunnel data；
CAPWAP message characteristic value is configured, the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value,
Obtain the access point AP information in the CAPWAP tunnel business datum；
The CAPWAP message characteristic value includes：The characteristic value of Preamble fields, the characteristic value of HLEN fields, Frag
The characteristic value of Offset fields, the characteristic value of Payload Start Position fields；
It is described that the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, obtain the CAPWAP tunnel
AP information in business datum, including：
Producer, the protocol version of CAPWAP tunnel are identified according to the characteristic value of the Preamble field configurations；According to described
The characteristic value of HLEN field configurations identifies the packet header length of the CAPWAP tunnel business datum；According to the Frag Offset
The characteristic value of field configuration identifies position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；According to described
The characteristic value of Payload Start Position field configurations identifies the start bit of the CAPWAP tunnel business datum content
It puts；
By calling and the producer and the matched analysis program of protocol version, according to the packet of the CAPWAP tunnel business datum
The position and the CAPWAP tunnel business of head length, the CAPWAP tunnel business datum in CAPWAP tunnel data packet
The initial position of data content parses the CAPWAP tunnel business datum, obtains the Payload Start Position words
The AP information included after section.
2. the according to the method described in claim 1, it is characterized in that, CAPWAP identified in the CAPWAP tunnel data
Tunnel service data, including：
It determines the port numbers of the CAPWAP tunnel business datum, the corresponding data message in the port is determined as described
CAPWAP tunnel business datum.
3. a kind of information acquisition method, which is characterized in that the method includes：
Access controller AC receives CAPWAP tunnel data, and the CAPWAP tunnel data are sent to collecting device；
The collecting device identifies the CAPWAP tunnel business datum in the CAPWAP tunnel data；
CAPWAP message characteristic value is configured, the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value,
Obtain the AP information in the CAPWAP tunnel business datum；
The CAPWAP message characteristic value includes：The characteristic value of Preamble fields, the characteristic value of HLEN fields, Frag
The characteristic value of Offset fields, the characteristic value of Payload Start Position fields；
It is described that the CAPWAP tunnel business datum is parsed according to the CAPWAP message characteristic value, obtain the CAPWAP tunnel
AP information in business datum, including：
The collecting device identifies the producer of CAPWAP tunnel, protocol version according to the characteristic value that the Preamble is configured；Root
The packet header length of the CAPWAP tunnel business datum is identified according to the characteristic value of HLEN configurations；According to the Frag
The characteristic value of Offset configurations identifies position of the CAPWAP tunnel business datum in CAPWAP tunnel data packet；According to institute
The characteristic value for stating Payload Start Position configurations identifies the initial position of the CAPWAP tunnel business datum content；
Calling and the producer and the matched analysis program of protocol version, it is long according to the packet header of the CAPWAP tunnel business datum
Degree, position and the CAPWAP tunnel business datum of the CAPWAP tunnel business datum in CAPWAP tunnel data packet
The initial position of content parses the CAPWAP tunnel business datum, after obtaining the Payload Start Position fields
Including AP information.
4. according to the method described in claim 3, it is characterized in that, the collecting device is identified in the CAPWAP tunnel data
CAPWAP tunnel business datum, including：
The collecting device determines the port numbers of the CAPWAP tunnel business datum, and the corresponding data message in the port is true
It is set to the CAPWAP tunnel business datum.
5. a kind of collecting device, which is characterized in that the collecting device includes：Data acquisition module, identification module, configuration module
And parsing module；Wherein,
The CAPWAP tunnel data for acquiring CAPWAP tunnel data, are sent to the knowledge by the data acquisition module
Other module；
The identification module, for identifying the CAPWAP tunnels in the CAPWAP tunnel data of the data acquisition module transmission
The CAPWAP tunnel business datum is sent to the parsing module by road business datum；
The configuration module, for CAPWAP message characteristic value to be configured；The configuration module, for Preamble fields to be configured
Characteristic value, the characteristic value of HLEN fields, the characteristic value of Frag Offset fields, Payload Start Position fields
Characteristic value；
The parsing module, the CAPWAP message characteristic value for being configured according to the configuration module parse the identification mould
The CAPWAP tunnel business datum that block is sent, obtains the AP information in the CAPWAP tunnel business datum.
The parsing module is additionally operable to the characteristic value identification for the Preamble fields being configured according to the configuration module
The producer of CAPWAP tunnel, protocol version；The CAPWAP tunnel business datum is identified according to the characteristic value of the HLEN fields
Packet header length；Identify the CAPWAP tunnel business datum in CAPWAP according to the characteristic value of the Frag Offset fields
Position in tunneling data packet；The CAPWAP tunnels are identified according to the characteristic value of the Payload Start Position fields
The initial position of road business datum content；It is additionally operable to by calling and the producer and the matched analysis program of protocol version, root
According to the packet header length of the CAPWAP tunnel business datum, the CAPWAP tunnel business datum in CAPWAP tunnel data packet
Position and the initial position of the CAPWAP tunnel business datum content parse the CAPWAP tunnel business datum, obtain
The AP information included after the Payload Start Position fields.
6. collecting device according to claim 5, which is characterized in that the identification module, for determining the CAPWAP
The corresponding data message in the port is determined as the CAPWAP tunnel business datum by the port numbers of tunnel service data.
7. a kind of Information Acquisition System, which is characterized in that the system comprises：Access controller AC and collecting device；Wherein,
The CAPWAP tunnel data for receiving CAPWAP tunnel data, are sent to collecting device by the AC；
The collecting device is claim 5 to 6 any one of them collecting device.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410084722.XA CN104917658B (en) | 2014-03-10 | 2014-03-10 | A kind of information acquisition method, equipment and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410084722.XA CN104917658B (en) | 2014-03-10 | 2014-03-10 | A kind of information acquisition method, equipment and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104917658A CN104917658A (en) | 2015-09-16 |
| CN104917658B true CN104917658B (en) | 2018-06-26 |
Family
ID=54086385
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410084722.XA Active CN104917658B (en) | 2014-03-10 | 2014-03-10 | A kind of information acquisition method, equipment and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104917658B (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101827380A (en) * | 2010-04-09 | 2010-09-08 | 北京傲天动联技术有限公司 | Wireless hotspot recognition system and method |
| CN101917439A (en) * | 2010-08-24 | 2010-12-15 | 杭州华三通信技术有限公司 | Data transmission method and equipment |
| CN102883265A (en) * | 2012-09-20 | 2013-01-16 | 中国联合网络通信集团有限公司 | Method, equipment and system for sending and receiving position information of access user |
| CN103346945A (en) * | 2013-06-25 | 2013-10-09 | 京信通信系统（中国）有限公司 | Method, device and system for transmitting data of CAPWAP tunnel |
-
2014
- 2014-03-10 CN CN201410084722.XA patent/CN104917658B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101827380A (en) * | 2010-04-09 | 2010-09-08 | 北京傲天动联技术有限公司 | Wireless hotspot recognition system and method |
| CN101917439A (en) * | 2010-08-24 | 2010-12-15 | 杭州华三通信技术有限公司 | Data transmission method and equipment |
| CN102883265A (en) * | 2012-09-20 | 2013-01-16 | 中国联合网络通信集团有限公司 | Method, equipment and system for sending and receiving position information of access user |
| CN103346945A (en) * | 2013-06-25 | 2013-10-09 | 京信通信系统（中国）有限公司 | Method, device and system for transmitting data of CAPWAP tunnel |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104917658A (en) | 2015-09-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20090010170A1 (en) | Varying the Position of Test Information in Data Units | |
| JP2016522627A (en) | Packet processing method and apparatus | |
| CN106657434B (en) | method and device for checking IP address | |
| CN111953552B (en) | Data flow classification method and message forwarding equipment | |
| CN108206788B (en) | Traffic service identification method and related equipment | |
| CN110519009B (en) | Data packet transmission method and device | |
| WO2015081693A1 (en) | Network sharing user identification method and apparatus | |
| CN107070719B (en) | Equipment management method and device | |
| US20150256459A1 (en) | Packet processing method and apparatus | |
| CN105049546B (en) | A kind of Dynamic Host Configuration Protocol server is the method and device of client distribution IP address | |
| CN104518968A (en) | Message processing method and transparent proxy server | |
| KR100677144B1 (en) | Method and apparatus for transmitting and receiving data via WUSB | |
| CN105323128B (en) | method, device and system for accessing front-end equipment to server | |
| KR101344398B1 (en) | Router and method for application awareness and traffic control on flow based router | |
| US8724473B2 (en) | Locating signatures in packets | |
| CN104853447B (en) | A kind of data information processing method and device | |
| CN110099138A (en) | A kind of method and system handling the DHCP data with VLAN TAG | |
| CN108243056B (en) | Method and device for acquiring abnormal information | |
| CN112335203B (en) | Processing local area network diagnostic data | |
| CN103916286B (en) | Test method and device for detecting network device | |
| US20230327983A1 (en) | Performance measurement in a segment routing network | |
| CN111490907B (en) | Method and device for determining VXLAN network performance parameters | |
| CN104917658B (en) | A kind of information acquisition method, equipment and system | |
| US10938772B2 (en) | Access device for analysis of physical links and method thereof | |
| WO2022227484A1 (en) | Data communication method and apparatus, computer device, and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |